$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136312e302f32342d3234203d3e203137373237.roa File: 3230322e35392e3136312e302f32342d3234203d3e203137373237.roa (raw, json) Hash identifier: PqC6UnYr2XZmTeZyVsOtNrAS1ZwfOZqgQnd+MOF4fYU= Subject key identifier: 38:35:E9:0C:C7:A9:A7:C2:08:57:CB:8B:FC:AC:06:D9:28:AF:26:B8 Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 6A4A8F7F4929EA40D3D2001F0FD8597304420A8D Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136312e302f32342d3234203d3e203137373237.roa Signing time: Sun 29 Oct 2023 08:00:04 +0000 ROA not before: Sun 29 Oct 2023 07:55:04 +0000 ROA not after: Sun 27 Oct 2024 08:00:04 +0000 asID: 17727 IP address blocks: 202.59.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 19:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:4a:8f:7f:49:29:ea:40:d3:d2:00:1f:0f:d8:59:73:04:42:0a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: Oct 29 07:55:04 2023 GMT Not After : Oct 27 08:00:04 2024 GMT Subject: CN=3835E90CC7A9A7C20857CB8BFCAC06D928AF26B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a1:40:41:4e:79:2f:0d:b7:fe:72:c3:5c:b4: 61:19:e4:a8:b8:1b:98:4f:d7:ae:c6:db:cb:84:e3: 12:6f:52:df:16:bc:b9:e4:07:39:cb:b2:03:6e:e7: c4:12:12:ad:a5:83:19:ef:62:30:62:b8:3f:e9:11: 0f:f3:f3:f1:73:0b:58:cb:03:ea:57:55:95:60:37: 7e:80:b4:b6:5d:a8:0a:32:f9:f6:74:40:10:59:5b: a3:2b:8c:ed:ea:7e:02:cd:2a:1b:ab:5b:2e:6f:6a: 75:e0:dd:df:f2:d6:51:43:84:5b:2c:ca:ca:88:06: 07:77:dd:f7:d7:0e:7f:d6:bd:98:28:e4:e3:68:01: c3:85:ff:5e:33:84:20:7e:70:16:3e:e4:36:cc:18: 7b:b9:80:10:26:2b:1c:51:ef:a8:da:7d:1a:e5:d0: 1d:f6:ae:79:ad:fb:e3:fc:25:50:c1:d8:28:3c:2e: e2:35:bd:c5:59:c9:73:57:e5:f7:f1:d7:34:9b:5a: 65:a8:80:15:ad:36:e4:04:46:50:2e:37:24:31:88: e6:9b:e7:6d:50:b2:3c:8e:bd:15:c2:a1:b2:98:f0: 4c:2b:d8:ec:8d:cc:50:6f:4b:b1:45:85:44:53:bb: 01:c8:9e:69:ca:fb:e1:62:c6:8b:e5:62:7a:cd:81: 7e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:35:E9:0C:C7:A9:A7:C2:08:57:CB:8B:FC:AC:06:D9:28:AF:26:B8 X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136312e302f32342d3234203d3e203137373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.59.161.0/24 Signature Algorithm: sha256WithRSAEncryption 20:19:4c:9e:b2:fe:6a:86:17:0b:5f:9f:29:6a:12:03:bc:28: f4:37:7d:a8:d9:2a:2e:48:57:99:73:5f:3d:ac:ca:58:d6:b4: 65:8d:8e:75:b9:54:87:e7:b5:4a:84:c8:02:9f:40:75:fb:d6: 85:ab:78:6b:90:26:f5:44:93:8c:17:2a:a0:92:10:a2:41:60: eb:bd:40:13:ab:82:f0:14:03:63:f2:79:a4:4c:ea:12:8d:0b: 78:fa:6d:d5:fb:e9:90:db:7f:92:48:73:69:97:9f:59:70:c1: ea:e8:a8:c8:30:7d:bf:32:c0:16:c1:1a:26:c2:90:72:b4:3a: bb:d7:83:aa:b5:99:83:6b:95:38:c1:07:f5:09:d0:40:2d:13: 09:3e:28:4d:a3:7f:63:e4:7b:04:46:82:ae:a3:e8:33:4b:3a: 1f:5e:db:3a:c8:3a:96:6b:89:63:13:76:93:3f:b1:61:18:66: ae:42:4f:f5:4c:2e:7b:d3:32:dd:4b:ae:76:5c:50:f9:b3:a5: b2:ee:cb:20:5c:1e:a8:f7:81:c1:07:b4:75:9a:98:dd:10:64: 82:4b:7d:e6:75:bc:1d:d0:54:71:27:b5:2f:04:d1:af:36:76: c5:06:7a:ae:f0:b5:42:df:9e:74:b5:c7:4a:50:05:bc:85:44: ec:1d:4a:d3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUakqPf0kp6kDT0gAfD9hZcwRCCo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yMzEwMjkwNzU1MDRaFw0yNDEwMjcwODAwMDRaMDMxMTAvBgNV BAMTKDM4MzVFOTBDQzdBOUE3QzIwODU3Q0I4QkZDQUMwNkQ5MjhBRjI2QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8oUBBTnkvDbf+csNctGEZ5Ki4 G5hP167G28uE4xJvUt8WvLnkBznLsgNu58QSEq2lgxnvYjBiuD/pEQ/z8/FzC1jL A+pXVZVgN36AtLZdqAoy+fZ0QBBZW6MrjO3qfgLNKhurWy5vanXg3d/y1lFDhFss ysqIBgd33ffXDn/WvZgo5ONoAcOF/14zhCB+cBY+5DbMGHu5gBAmKxxR76jafRrl 0B32rnmt++P8JVDB2Cg8LuI1vcVZyXNX5ffx1zSbWmWogBWtNuQERlAuNyQxiOab 521QsjyOvRXCobKY8Ewr2OyNzFBvS7FFhURTuwHInmnK++FixovlYnrNgX5LAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUODXpDMepp8IIV8uL/KwG2SivJrgwHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMyMzAzMjJlMzUzOTJlMzEzNjMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM3MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMo7oTANBgkqhkiG 9w0BAQsFAAOCAQEAIBlMnrL+aoYXC1+fKWoSA7wo9Dd9qNkqLkhXmXNfPazKWNa0 ZY2OdblUh+e1SoTIAp9AdfvWhat4a5Am9USTjBcqoJIQokFg671AE6uC8BQDY/J5 pEzqEo0LePpt1fvpkNt/kkhzaZefWXDB6uioyDB9vzLAFsEaJsKQcrQ6u9eDqrWZ g2uVOMEH9QnQQC0TCT4oTaN/Y+R7BEaCrqPoM0s6H17bOsg6lmuJYxN2kz+xYRhm rkJP9Uwue9My3UuudlxQ+bOlsu7LIFweqPeBwQe0dZqY3RBkgkt95nW8HdBUcSe1 LwTRrzZ2xQZ6rvC1Qt+edLXHSlAFvIVE7B1K0w== -----END CERTIFICATE-----Generated at Wed May 1 19:11:08 2024 by rpki-client on console-fra.rpki-client.org